-
44.201.56.94 · access_log-20251228.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: a3483a10bcfaa08cecb3af5f85aa8b6a435b5345 SHA256: 9670215027da2ecfd4b91a253cbc4c4fb9703523f1fed6ca0b86e006eccccf40 application/x-gzip 516.17KB
2025-12-27 23:59:06 +0000 UTC
-
44.201.56.94 · access_log-20251228.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: a3483a10bcfaa08cecb3af5f85aa8b6a435b5345 SHA256: 9670215027da2ecfd4b91a253cbc4c4fb9703523f1fed6ca0b86e006eccccf40 application/x-gzip 516.17KB
2025-12-27 23:59:06 +0000 UTC
-
44.201.56.94 · access_log-20251228.gz
/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: a3483a10bcfaa08cecb3af5f85aa8b6a435b5345 SHA256: 9670215027da2ecfd4b91a253cbc4c4fb9703523f1fed6ca0b86e006eccccf40 application/x-gzip 516.17KB
2025-12-27 23:59:06 +0000 UTC
-
44.201.56.94 · access_log-20251228.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache2/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: a3483a10bcfaa08cecb3af5f85aa8b6a435b5345 SHA256: 9670215027da2ecfd4b91a253cbc4c4fb9703523f1fed6ca0b86e006eccccf40 application/x-gzip 516.17KB
2025-12-27 23:59:06 +0000 UTC
-
44.201.56.94 · access_log-20251228.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: a3483a10bcfaa08cecb3af5f85aa8b6a435b5345 SHA256: 9670215027da2ecfd4b91a253cbc4c4fb9703523f1fed6ca0b86e006eccccf40 application/x-gzip 516.17KB
2025-12-27 23:59:06 +0000 UTC
-
44.201.56.94 · access_log-20251228.gz
/stack/apache/htdocs/stack/apache/htdocs/stack/apache/logs/
United States · Amazon.com, Inc.Yara EXPL_Exchange_ProxyShell_Successful_Aug21_1 From Florian Roth by Florian Roth (Nextron Systems)Download archived sample
The password is "infected"SHA1: a3483a10bcfaa08cecb3af5f85aa8b6a435b5345 SHA256: 9670215027da2ecfd4b91a253cbc4c4fb9703523f1fed6ca0b86e006eccccf40 application/x-gzip 516.17KB
2025-12-27 23:59:06 +0000 UTC